Re: Does Net-SNMP support AES192 or AES256?

Keith Mendoza <[email protected]>
Newsgroups gmane.network.net-snmp.devel
Message-ID <CAGhaNLcxDU7uyqkTu-7z+2dyXpayUazqCPLzykhC2eLrFqbpGQ@mail.gmail.com>
Simon,
Those options have to be enabled in the configure options. I suggest
building with the following configure options:
    --with-transports="DTLSUDP" --with-security-modules="tsm"

There might be other configure options that you need to make it work.

Just note though that SNMPv3 RFC _does not_ specify AES192 and AES256;
they specified some older algorithms that were "latest and greatest"
at the time it was being drafted :(

Thanks,
Keith
Thanks,
Keith


On Thu, Apr 5, 2018 at 1:54 PM, Simon Chamlian <[email protected]> wrote:
>
>
>
> Hi,
>
> Does Net-SNMP support AES192 or AES256?
>
> According to this link
>
> http://www.net-snmp.org/wiki/index.php/Strong_Authentication_or_Encryption
>
> The short answer is Yes, starting with release 5.8 AES193 and AES256 are an
> optional configure option.
>
> So I downloaded version 5.8.pre2 and tried:
>
>
>   createUser user2  SHA "passwrd-00" AES192 "default-00"
>   rwuser       user2
>
>   createUser user3  SHA "passwrd-00" AES256 "default-00"
>   rwuser       user3
>
>
> Does not work. I get an error:
>   snmpd.conf: line 27: Error: unknown privProtocol
>   snmpd.conf: line 31: Error: unknown privProtocol
>
> Any insight will be highly appreciated.
>
> S.
>
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Net-snmp-coders mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/net-snmp-coders
>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.